The following notices provide a simple overview of what happens to your personal data when you visit our website.
Definition of “personal data”
This is any information relating to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
Data collection on our website
Processor and responsible for data protection:
Management: Boris Fischmann
Phone: +49 151 14657758
You can find further details under our Imprint
Data Protection Commissioner
Attorney Nils Pütz
c/o NoseDat GmbH
Phone: +49 941 630830
Data protection is a high priority for us. Below we inform you which data is collected and for which purposes this data is processed and used, as well as your rights.
When you visit our website, the following information is stored in the server log files by default.
- the page from which the file was requested – referrer URL
- the name of the file
- the date and time of the request
- a description of the type of web browser / browser version and operating system used
- Host name of the accessing computer
The stored data is evaluated exclusively for internal statistical purposes and does not allow us to draw any conclusions about your person.
The aforementioned data will be processed by us for the following purposes:
- Ensuring proper and smooth connection of the website,
- Ensuring the use of the website,
- Evaluation of system security and stability
Art. 6 par. 1 p. 1 lit. f GDPR provides the legal basis for the collection of data.
The legitimate interest follows from the described purpose of the data collection.
You can visit our website without providing any personal information. In no case do we use the collected data for the purpose of drawing conclusions about your person.
The processing of the data we receive through our website takes place on servers within Europe.
If this is not the case for individual tools/plug-ins, we will note this at the respective location.
Instructions (examples) on how to disable cookies:
– Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
– Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
– Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
– Safari: https://support.apple.com/kb/ph21411?locale=de_DE
– Opera: http://help.opera.com/Windows/10.20/de/cookies.html
If you send us inquiries via the contact form, the information you provide in the inquiry form, including the contact data you enter there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not share this data without your consent.
The processing of the data entered in the contact form is therefore based exclusively on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. For this purpose, an informal message by e-mail to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory legal provisions – in particular retention periods – remain unaffected.
Communication via email
We also communicate by email with the consent of the respective data subject (Art 6 para.1 lit.a GDPR).
Emails can represent business letters so that these emails incl. of the email address will be stored by us until the expiry of periods under tax law and/or commercial law and/or retention periods under other legal provisions.
After the retention period has expired, a check is made towards the end of the calendar year to determine whether there is a further need for processing. If this is not the case, the data will be deleted.
SSL – Encryption
To protect your data, we use the SSL (Secure Socket Layer) procedure. Our security measures are continuously improved in line with technological developments
Data protection when sending application documents
If you send us application documents, we will only use them to decide on your application and will not pass on your data to third parties.
Since an application usually contains sensitive personal data, we would like to point out that you are responsible for any encryption of the data. If you use encryption, please provide us with the appropriate password by phone.
Application data is kept and managed separately from other data records and used exclusively for the purpose of application selection. When an employment relationship is established, the necessary data from the application process is transferred to the personnel file.
If no employment relationship is established, the application documents will be automatically deleted no later than 6 months after notification of the rejection decision, provided that no other legitimate interests of the controller are opposed to deletion or the applicant has expressly consented to longer storage and retention of his or her application (applicant pool).
The legal basis for data processing is Art 6 para. 1 lit a and b GDPR there (consent and contract initiation). The retention period after cancellation results from Art 6 para. 1 lit f GDPR (presentation of legally compliant actions, e.g. according to AGG).
Plugins and tools
Google Analytics (if you have given your consent)
For the purpose of demand-oriented design and continuous optimization of our pages, we use Google Analytics, a web analytics service of the Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”), provided that you have consented to its use. You can revoke your consent at any time for the future.
In this context, pseudonymized usage profiles are created and cookies are used. The information generated by the cookie about your use of this website such as
- Browser type/version,
- operating system used,
- Referrer URL (the previously visited page),
- Host name of the accessing computer (IP address),
- Time of the server request,
are transferred to a Google server in the USA and stored there.
The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to the use of the website and the Internet for the purposes of market research and demand-oriented design of these Internet pages.
This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf.
In no case will your IP address be merged with other data from Google. The IP addresses are anonymized so that an assignment is not possible (IP masking).
Further information on data protection in connection with Google Analytics can be found, for example, in Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=de).
Use of Google reCaptcha
Our website uses the reCAPTCHA service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). The purpose of the query is to prevent abusive machine processing of data.
The legal basis for the use of Google reCaptcha on our website is Art. 6 para. 1 p. 1 lit. f GDPR.
What do we use your data for?
We use your data to provide our products and services (fulfillment of contract purpose), as well as to evaluate the number of visitors and access numbers and to optimize and protect our website.
With your consent, we use the data you enter yourself to respond to your contact request/message.
Your personal data will not be transferred to third parties for purposes other than those listed below.
We will only share your personal information with third parties if:
- According to Art. 6 par. 1 p. 1 lit. a GDPR you have given consent to this,
- the disclosure according to Art 6 para. 1 p. 1 lit. b GDPR is necessary for the performance of the contract to which you are a party, or for the implementation of pre-contractual measures, which are carried out at your request.
- in the event that for the transfer according to Art. 6 para. 1 p. 1 lit. c GDPR a legal obligation exists or the processing is necessary for compliance with a legal obligation to which the controller is subject.
- in the event that, pursuant to Art. 6 para. 1 p. 1 lit. d GDPR, the processing is necessary in order to protect the vital interests of the data subject or another natural person;
- in the event that, pursuant to Art. 6 para. 1 p. 1 lit. e GDPR, the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
- in the event that, pursuant to Art. 6 para. 1 p. 1 lit. f GDPR, the processing is necessary for the purposes of the legitimate interests of the controller or of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.
Data subject rights
You have the right:
- according to Art. 7 par. 3 GDPR, you may revoke your consent at any time. This has the consequence that we may no longer continue the data processing based on this consent for the future;
- to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
- in accordance with Art. 16 GDPR to immediately demand the correction of incorrect or completion of your personal data stored by us;
- pursuant to Art. 17 GDPR to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
- to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims, or you request the restriction of the processing of your personal data in accordance with Art. 18 GDPR.
- 21 GDPR have lodged an objection against the processing;
- pursuant to Art. 20 GDPR to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller;
- complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office for this purpose.
An overview of the respective state data protection commissioners can be found at the following link Link (https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html)
Right of objection
If your personal data is collected on the basis of Art 6 para. 1 lit. e GDPR or processed on the basis of legitimate interests pursuant to Art. 6 para. 1 p. 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR. The controller shall then no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of you, or the processing serves the purpose of asserting, exercising or defending legal claims.
In case of processing of your data for the purpose of direct marketing, you have a general right of objection, which will be implemented by us without specifying a particular situation. (Art 21 (2) GDPR)
If you wish to exercise your right of revocation or objection, this is possible informally. For example, it is enough to send us an e-mail.